Post-Quantum Firmware Signing in IoT - Practical PQC-FOTA Implementation

Explore practical implementation of post-quantum cryptography for securing firmware updates in IoT devices through this 19-minute conference presentation. Learn how to protect ESP32-based IoT devices from quantum computing threats by implementing NIST-standardized digital signature algorithms ML-DSA (FIPS 204, formerly CRYSTALS-Dilithium) and SLH-DSA (FIPS 205, formerly SPHINCS+) in Firmware Over-the-Air (FOTA) update processes. Discover how to integrate these post-quantum cryptographic solutions into the ESP32 secure boot process using the Open Quantum Safe (OQS) library, replacing traditional RSA/ECDSA schemes. Examine the performance trade-offs, code size implications, and interoperability considerations when deploying PQC on resource-constrained hardware. Gain insights into hybrid signing approaches that combine classical algorithms like ECDSA with ML-DSA to maintain backward compatibility while preparing for the quantum era. The presentation includes real-world deployment demonstrations on ESP32 hardware and practical guidance for implementing quantum-resistant security measures in long-lived IoT devices.